News for hackers. Stuff that matters.

A comment on Microsoft says encryption laws make companies wary of storing data in Australia. Parent comment

Re:Microsoft says encryption laws make companies wary of sto... by fgnjksadklafs on Thursday March 28, 2019 @03:14AM (#19509989)
Really? It took me about 10 seconds to come up with this: "Hey tech dude, we need a version of iOS that unlocks the encryption on this device. Be a good boy and send us an IPSW that we can install on this nasty person's phone will you?"

You don't need to release it to the public. Build it on your local device and hand it to them. Nobody needs to know.

[ Parent | on HN ]
Re:Microsoft says encryption laws make companies wary of sto... by lozenge on Thursday March 28, 2019 @06:06AM (#19510745)
The number of people with access to the private keys that sign iOS updates must be very limited - I wouldn't be surprised if you needed at least two people actively involved in signing every update.

On top of that, Apple is heavily siloed, and somebody working on the Calendar app won't have information on the operation of Secure Enclave, the chip that deals with authenticating fingerprints, passcodes, Apple Pay etc.

So it would be more like "Hey tech dude, can you sneak a change to the compiler your company uses to build iOS, to have it compile a backdoor into iOS, then surreptitiously login to the relevant machines and place your new compiler?"

[ Parent | on HN ]
Re:Microsoft says encryption laws make companies wary of sto... by marcus_holmes on Thursday March 28, 2019 @07:14AM (#19511031)
If a developer in Apple has access to the signing keys for iOS and can decrypt anything at all on a production device, then Apple is totally screwed.

It simply cannot work like this, because a single rogue employee can (and would have by now) posted it on a forum/wikileaks/something, simply because they could.

[ Parent | on HN ]